0c384cc158629566b4b46ee1798d73b12ee4fb23431461621216ca753177d8c2 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

jianyingma...96.exe

windows10-2004-x64

7

jianyingma...96.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
jianyingmac_jianying_pc_bingsem_winmac_rlx2_windows_v66067_1551_1764568896.exe
Size 2.7MB
Sample260814-pr8azabm6w
SHA256 0c384cc158629566b4b46ee1798d73b12ee4fb23431461621216ca753177d8c2
MD5 2ee3dd5f93dff552b8f2bbc7032b1551
SHA1 bc645e479d0259b69b498339e5a3f92bd521d7e2
SHA512 fed1132020a16707dfda8e893816e61996575283cf93679f0e7827261645bea51b8266c7b2ec846d9e4647ee133f837c4732aa01546dbf52570fd219a2bcf51e
SSDEEP 49152:fw8G/BFC4Hk1v0tfjBR1mpJ1/5hNSz3zmMu6S+hBBvle/WnG/MmWB:fw8G/nHWChmpJ1bYSkhBBvQEG/MbB
TLSH
T11ED52343B2408284E0369A7186AAC9F515273E77DC50D91AA5F9FE233BF3295612F13F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jianyingmac_jianying_pc_bingsem_winmac_rlx2_windows_v66067_1551_1764568896.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

jianyingmac_jianying_pc_bingsem_winmac_rlx2_windows_v66067_1551_1764568896.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral3

Sample

$PLUGINSDIR/BgWorker.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/BgWorker.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/downloader_nsis_plugin.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/downloader_nsis_plugin.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/shell_downloader.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/shell_downloader.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  jianyingmac_jianying_pc_bingsem_winmac_rlx2_windows_v66067_1551_1764568896.exe
- Size 2.7MB
- SHA256 0c384cc158629566b4b46ee1798d73b12ee4fb23431461621216ca753177d8c2
- MD5 2ee3dd5f93dff552b8f2bbc7032b1551
- SHA1 bc645e479d0259b69b498339e5a3f92bd521d7e2
- SHA512 fed1132020a16707dfda8e893816e61996575283cf93679f0e7827261645bea51b8266c7b2ec846d9e4647ee133f837c4732aa01546dbf52570fd219a2bcf51e
- SSDEEP 49152:fw8G/BFC4Hk1v0tfjBR1mpJ1/5hNSz3zmMu6S+hBBvle/WnG/MmWB:fw8G/nHWChmpJ1bYSkhBBvQEG/MbB
- TLSH
  T11ED52343B2408284E0369A7186AAC9F515273E77DC50D91AA5F9FE233BF3295612F13F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery defense_evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- TLSH
  T1C351B72E612C0BFFC2963C34BC96795B1B6FC060A39A6328813FC5853C141B4233DB2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/downloader_nsis_plugin.dll
- Size 1.4MB
- SHA256 76b4ce453c04a37e77501ba9fa9540c5ededef437c496bca5fe42ca7389697e7
- MD5 9f13f70f5504d4206277526ca0bcb85a
- SHA1 d7b3f268bc1d39b0a90e8ea10e66fb6b3703133b
- SHA512 273f2456d809b26aaa1044f14b1cbf5e99a7e81c26180370c727f41b851779e07181f965ace00b43da44aac6d6789602651f46f8493702d78880b36af19b5bd1
- SSDEEP 24576:P0ikESlxHS48ePG5PP19cl93yU/GSqYoo8mHEv3cksbXxyjZEHvJR:nxUxHdG5y3y9SqYoo8oEkksb8ZCR
- TLSH
  T185659E41B1D182B5C8476231392DA73D6E7C5E124F2189C7F3F4BEA429B26D25A3336E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/shell_downloader.dll
- Size 2.3MB
- SHA256 e94946a87e8e0ad080a39db1dcf296b1c9af5a20d5c1c383a72949710796faca
- MD5 3f677a22b085292ea860c382e3687a9e
- SHA1 201bfaa0e43320045c3059f303bdbcef05794091
- SHA512 231d2d782a2f0201c64507c85727103d346303b4f34eefa0baf96dfd0d68f405f41ccf7cbf6eb7b149c984f7863f863884bb38f8bac2d15a7671e552564a7fe0
- SSDEEP 49152:8KF9iNwZyljeOItpEUWqmFRxKwOgCjwqaezhwZUiCJ:8KPi9upEcm7x8g4wqa6iC
- TLSH
  T143B59D02B5A290B5CC4B3172749DA77D9A380A844B34CDD7CBD0ACE47BF15D2263E79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscoverytrojan

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy